New Fractureiser malware used CurseForge Minecraft mods to infect Windows, Linux
07-Jun-23
Hackers spread a new information-stealing malware called Fractureiser by uploading changes and by injecting malicious code into already-existing projects using the well-known Minecraft modding platforms Bukkit and CurseForge.Notably, many of the affected modpacks had their security breached despite supposedly having two-factor authentication in place.
Several CurseForge and Bukkit accounts were reportedly stolen and used to inject dangerous code into plugins and mods, which were later used by well-known modpacks including Better Minecraft, which has received over 4.6 million downloads.The updates were simultaneously published to users via the API but immediately archived so they would not be visible to the general public.
